The ransomware incident targeted the Judicial Branch of the Province of Jujuy in Argentina (AR), with the threat actor emperador claiming access to the organization’s WordPress databases, internal system login credentials, and email credentials, and demanding payment in response. The attacker referenced stolen data size of 4.2 GB and threatened further action unless the victim paid the ransom, impacting Argentina #Argentina
Microsoft says a high-volume phishing campaign is using invisible Unicode tag characters to split finance-related lure words and evade email filters, with the activity peaking at millions of messages per day. The campaign is tied to finance-themed sender domains and ActiveCampaign infrastructure, and it shows how AI-era evasion tactics can be…
OpenAI introduced Daybreak for Frontline Defenders on September 3, 2026, offering $1 billion in subsidized access to frontier cyber capabilities, training, and technical assistance for critical infrastructure defenders. The initiative aims to help under-resourced organizations close the gap against increasingly AI-assisted attacks before aging systems are overwhelmed. #OpenAI #Daybreak #DaybreakBlue #DaybreakRed…
Hewlett Packard Enterprise (HPE) has released patches for 34 CVEs in Aruba Networking ArubaOS-CX, including critical remote code execution flaws that could let an unauthenticated attacker compromise enterprise switches. The update fixes more than 150 issues across multiple versions, and HPE says it is not aware of any of the vulnerabilities…
A forum actor posting as Alduin claims to have leaked data from amf.asso.fr, the Association des Maires de France, after a union-based SQL injection. The alleged breach includes town hall login addresses and plaintext passwords, along with official subscriber and account data, but the claim remains unverified. #Alduin #AssociationdesMairesdeFrance #amfasso.fr #SQLinjection…
A forum actor calling themselves HollowCrimeCorp is allegedly selling verified and active online banking access to a BNP Paribas savings account in France. The listing claims full dashboard visibility, transfer capability, and a balance of about 262,000 euros, but the access remains unverified and is being offered by private negotiation with…
A forum actor using the name fuie claimed to have accessed an INPI file transfer service with an administrator account and published 27,348,474 registry records. The alleged leak includes director and representative details such as birth names, dates of birth, residence information, and company identifiers, but the claim remains unverified. #INPI…
Trezor confirmed that a breach at its fulfillment partner ShipMonk exposed customer order data, including names, emails, phone numbers, shipping addresses, and order numbers, affecting about 80,000 people in total. Trezor said its own systems and hardware wallets were not compromised, and the main risks are phishing and possible physical safety…
European Parliament members are urging the EU to slow Serbia’s accession process after a report found Pegasus and NoviSpy spyware on the phones of Serbian student activists. The lawmakers said the evidence points to state-backed surveillance by Serbian authorities and called for stronger rule-of-law accountability before any further progress on EU membership. #Pegasus #NoviSpy #Serbia #EuropeanParliament
PTAC was targeted in a cyberattack that exploited a vulnerability in the public part of its ASDIS statistics system, allowing access to contact data. Cert.lv detected the incident, which involved stolen details for 697 business representatives and 34 PTAC officials. #PTAC #Cert.lv #ASDIS
Sports Endeavors, a North Carolina-based US company founded in 1984, was impacted by a ransomware incident attributed to threat actor spacebears. The company, which sells soccer and other sports uniforms and apparel through brands including Soccer.com, WorldSoccerShop, and 431 Sports, faced disruption following the attack on its systems in the United States. #UnitedStates
Wolfram Research, a US-based technology and software company known for Mathematica and Wolfram Alpha, was targeted by the direwolf ransomware threat actor. The incident impacted #UnitedStates
SilentRansomGroup ransomware claim alleged against H… C… (full company name pending disclosure; FULL DATA TIMER active). Impacted country(s): # (missing country data)
An identity verification company is suspected of being tied to a breach that exposed 153 million identity cards, including driver’s licenses, travel documents, and medical cards from North American victims. The incident highlights the risks of storing sensitive identity documents and has reportedly led to an FBI investigation into IDScan.net. #IDScan.net #BrianKrebs #FBI
In NL, Huisartsencentrum Klein Iterson (huisartsencentrumkleiniterson.nl) was reportedly affected by LockBit5 ransomware. The attack targeted their Healthcare Services operations, resulting in service disruption and data compromise, #Netherlands